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Abstract 

We study the universality of scaling of entanglement in Shor's fac- 
toring algorithm and in adiabatic quantum algorithms across a quan- 
tum phase transition for both the NP-complete Exact Cover problem 
as well as the Grover's problem. The analytic result for Shor's algo- 
rithm shows a linear scaling of the entropy in terms of the number 
of qubits, therefore difficulting the possibility of an efficient classi- 
cal simulation protocol. A similar result is obtained numerically for 
the quantum adiabatic evolution Exact Cover algorithm, which also 
shows universality of the quantum phase transition the system evolves 
nearby. On the other hand, entanglement in Grover's adiabatic algo- 
rithm remains a bounded quantity even at the critical point. A classi- 
fication of scaling of entanglement appears as a natural grading of the 
computational complexity of simulating quantum phase transitions. 

PACS numbers: 03.67.-a, 03.65.Ud, 03.67.Hk 
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1 Introduction 



One of the main theoretical challenges in quantum computation theory is quantum 
algorithm design. Some attempts to uncover underlying principles common to all 
known efficient quantum algorithms have already been explored though not definite 
and satisfactory answer has been found yet. On the one hand, it has been seen that 
majorization theory seems to play an important role in the efficiency of quantum 
algorithms [1-3]. All known efficient quantum algorithms verify a step by step 
majorization of the probability distribution associated to the quantum register in 
the measurement basis. Therefore, efficient quantum algorithms drive the system 
towards the final solution by carefully reordering probability amplitudes in such 
a way that a majorization arrow is always present. On the other hand, the most 
relevant ingredient is likely the role entanglement plays in quantum computational 
speedup. Regarding this topic several results have recently been found [4-9] which 
suggest that entanglement is at the heart of the power of quantum computers. 

An important result has been obtained by Vidal [8], who proved that large en- 
tanglement of the quantum register is a necessary condition for exponential speed- 
up in quantum computation. To be concrete, a quantum register such that the 
maximum Schmidt number of any bipartition is bounded at most by a polynomial 
in the size of the system can be simulated efficiently by classical means. The figure 
of merit x proposed in [8] is the maximum Schmidt number of any bi-partitioning 
of the quantum state or, in other words, the maximum rank of the reduced density 
matrices for any possible splitting. It can be proved that x > 2 E ^ P \ where the 
Von Neumann entropy E(p) refers to the reduced density matrix of any of the 
two partitions. If % = 0(poly(n)) at every step of the computation in a quantum 
algorithm, then it can be efficiently classically simulated. Exponential speed-up 
over classical computation is only possible if at some step along the computation 
X ~ exp(n a ), or E(p) ~ n b , being a and b positive constants. In order to exponen- 
tially accelerate the performance of classical computers any quantum algorithm 
must necessarily create an exponentially large amount of x a t some point. 

Another topic of intense research concerns the behavior of entanglement in 
systems undergoing a quantum phase transition [10]. Quantum correlations in 
critical systems have been analyzed in many situations and using a wide range of 
entanglement measurements [9,11-18]. In particular, it has been noted [13,14,16, 
17] that some of these measurements have important connections to well-known 
results arising from conformal field theory [19-22]. More generally, when a splitting 
of a (i-dimensional spin system is made, the Von Neumann entropy for the reduced 
density matrix of one of the subsystems E(p) = — tr(plog2p) at the critical point 
should display a universal leading scaling behavior determined by the area of the 
region partitioning the whole system. This result depends on the connectivity of 
the Hamiltonian and applies as is to theories with a Gaussian continuum limit. For 
example, when separating the system in the interior and the exterior of a sphere 
of radius R and assuming an ultraviolet cutoff xq, the entropy of e.g. the interior 
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where c\ corresponds to a known heat-kernel coefficient [21]. In terms of the 
number of spins present in the system, this leading universal scaling behavior can 
be written as 



(which reduces to a logarithmic law for d = 1). This explicit dependence of entan- 
glement with dimensionality throws new light into some well established results 
from quantum computation. 

A similar situation is present in quantum adiabatic algorithms, initially in- 
troduced by Farhi et. al. [23], where the Hamiltonian of the system depends on 
a control parameter s which in turn has a given time dependence. The Hamil- 
tonians related to adiabatic quantum computation for solving some NP-complete 
problems (such as 3-SAT or Exact Cover) can be directly mapped to interactive 
non-local spin systems, and therefore we can extend the study of entanglement to 
include this kind of Hamiltonians. This point of view has the additional interest of 
being directly connected to the possibility of efficient classical simulations of the 
quantum algorithm, by means of the protocol proposed in ref. [8]. 

In this paper we analyze the scaling of the entropy of entanglement in sev- 
eral quantum algorithms. More concretely, we focus on Shor's quantum factoring 
algorithm [24] and on a quantum algorithm by adiabatic evolution solving the 
NP-complete problem Exact Cover [25], finding for both of them evidence of a 
quantum exponential speedup with linear scaling of quantum correlations, which 
difficults the possibility of an efficient classical simulation. We furthermore study 
the adiabatic implementation of Graver's quantum search algorithm [29-31], in 
which entanglement is a bounded quantity even at the critical point, regardless of 
the size of the system. 

We have structured the paper as follows: in Sec. 2 we analytically address 
the study of quantum entanglement present in Shor's factoring algorithm. We 
consider the problem of universal scaling of entanglement at the critical point of 
an adiabatic quantum algorithm solving the NP-complete problem Exact Cover 
in Sec. 3, where we present numerical results for systems up to 20 qubits. In 
Sec. 4 we focus on the adiabatic implementation of Graver's quantum searching 
algorithm, and derive analytical expressions for the study of entanglement in the 
system. Finally, in Sec. 5 we collect the conclusions of our work. 
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2 Scaling of entanglement in Shor's factoring 
algorithm 



It is believed that the reason why Shor's quantum algorithm for factorization [24] 
beats so clearly its classical rivals is rooted in the clever use it makes of quantum 
entanglement. Several attempts have been made in order to understand the be- 
havior of the quantum correlations present along the computation [6,7]. In our 
case, we will concentrate in the study of the scaling behavior for the entangle- 
ment entropy of the system. We shall first remember both Shor's original [24] and 
phase-estimation [32] proposals of the factoring algorithm and afterwards we shall 
move to the analytical analysis of their quantum correlations. 

2.1 The factoring algorithm 

The interested reader is addressed to [24,32-34] for precise details. Given an odd 
integer N to factorize, we pick up a random number a £ [1, -ZV]. We make the 
assumption that a and iV are Co-primes (otherwise the greatest common divisor 
of a and N would already be a non-trivial factor of N). There exists a smaller 
integer r £ [1,N], called the order of the modular exponentiation a x mod N, such 
that a r mod N = 1. Let us assume that the a we have chosen is such that r is even 
and a r / 2 mod N ^ — 1, which happens with very high probability (bigger than or 
equal to 1/(2 log 2-^0)- This is the case of interest because then the greatest com- 
mon divisor of N and a r / 2 ± 1 is a non-trivial factor of N. Therefore, the factoring 
problem has been reduced to the order-finding problem of the modular exponenti- 
ation function a x mod N, and it is at this point where quantum mechanics comes 
at work. The procedure can be casted in two different ways: 

2.1.1 Shor's proposal for order-finding 

We make use of two quantum registers: a source register of k qubits (such that 2 k G 
[iV 2 , 2iV 2 ]) and a target register of n = [log2-/V~] qubits. The performance of the 
quantum algorithm is shown in Fig. ^ where we are making use of the Hadamard 
gate initially acting over the k qubits of the source, the unitary implementation of 
the modular exponentiation function 



(where \q) and \x) respectively belong to the source and target registers), and the 
Quantum Fourier Transform operator 



All these operations can be efficiently implemented by means of one and two- 
qubit gates. Finally, a suitable classical treatment of the final measurement of 



U f \q)\x) = |g)|(x + a 9 ) mod N) 



(3) 
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this quantum algorithm provides us with r in few steps, and therefore the prime 
factorization of N in a time 0((log 2-^V) 3 ). 
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Figure 1: quantum circuit for the order- finding algorithm for the modular 
exponentiation function. 



2.1.2 Phase-estimation proposal for order-finding 

We refer the interested reader to [32] for more details. The quantum circuit is 
similar to the one shown in the previous section but slightly modified, as is shown 
in Fig. [3 The unitary operator Vf to which the phase-estimation procedure is 
applied is defined as 

V f \x) = I (a x) mod N) (5) 

(appreciate the difference between expressions (jSJ) and (jSJ), being diagonalized by 
eigenvectors 

1 r_1 

= -J/2 Yl e- 2nisp/r \a p mod N) (6) 

such that 

V f \v s ) = e 2 ™/ r \v s ) , (7) 

and satisfying the relation —q^ ^21=0 \ v s) = The operator is applied over the 
target register being controlled on the qubits of the source in such a way that 

A(V f )\j)\x) = \j)Vj\x) , (8) 

where by A(Vf) we understand the full controlled operation acting over the whole 
system, which can be efficiently implemented in terms of one and two-qubit gates. 
As in the previous case, the information provided by a final measurement of the 
quantum computer enables us to get the factors of ./V in a time 0((log 2 iV) 3 ). 
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Figure 2: phase-estimation version of the quantum circuit for the order- 
finding algorithm. The controlled operation is A(Vf). 



2.2 Analytical results 

We choose to study the amount of entanglement between the source and the target 
register in the two proposed quantum circuits, right after the modular exponen- 
tiation operation Uf (Fig. ^) or the controlled Vf operation (Fig. EJ), and before 
the Quantum Fourier Transform in both cases. At this step of the computation, 
the pure quantum state of the quantum computer is easily seen to be exactly the 
same for both quantum circuits, and is given by 

9=0 

and therefore the density matrix of the whole system is 

2 k -l 

MM = 2* E O^te'D (KmodAOK'modiVl) • (10) 

q,q'=0 

Tracing out the quantum bits corresponding to the source, we get the density 
matrix of the target register, which reads 

- 2 fc -l 

target = tr source (|^) (^|) = p E (<P\v)tf\p)) (V ™odN)(a q ' modiV|) , 

p,q,q'=0 

(11) 

that is, 



Ptargct — 

-j: \ aP mod N )( aP mod ^1 ~ - Yl l flP modN )( aP modiV| . (12) 

p=0 p=0 

The last step comes from the fact that a r mod N = 1, being r £ the or- 

der of the modular exponentiation. If 2 k were a multiple of r there would not 
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be any approximation and the last equation would be exact. This is not neces- 
sarily the case, but the corrections to this expression go like 0(l/2 k ), thus being 
exponentially small in the size of the system. 

It follows from expression (|12|) that the rank of the reduced density matrix of 
the target register at this point of the computation is 

rankOtarget) = r . (13) 

Because r £ [1,^V], this rank is usually O(N). If this were not the case, for 
example if r were 0(log2-/V), then the order- finding problem could be efficiently 
solved by a classical naive algorithm and it would not be considered as classically 
hard. Because N is exponentially big in the number of qubits, we have found a 
particular bipartition of the system (namely, the bipartition between the source 
register and the target register) and a step in the quantum algorithm in which the 
entanglement, as measured by the rank of the reduced density matrix of one of 
the subsystems, is exponentially big. This implies in turn that Shor's quantum 
factoring algorithm can not be efficiently classically simulated by any protocol in 
ref. [8] owing to the fact that at this step x = O(N), therefore constituting an 
inherent exponential quantum speed-up based on an exponentially big amount of 
entanglement. It is worth noticing that the purpose of the entanglement between 
the two registers consists on leaving the source in the right periodic state to be 
processed by the Quantum Fourier Transform. Measuring the register right after 
the entangling gate disentangles the two registers while leaving the source in a 
periodic state, and this effect can only be accomplished by previously entangling 
source and target. These conclusions apply both to Shor's original proposal (circuit 
of Fig. ^) and to the phase-estimation version (circuit of Fig. [2J). 

The behavior of the rank of the system involves that the entropy of entangle- 
ment of the reduced density matrix at this point will mainly scale linearly with 
the number of qubits, E ~ log 2 T ~ logaiV ~ n, which is the hardest of all the 
possible scaling laws. We will find again this strong behavior for the entropy in 
Sec. 3. 

3 Scaling of entanglement in an NP-complete 
problem 

We now turn to analyze how entanglement scales for a quantum algorithm based 
on adiabatic evolution [23], designed to solve the NP-complete problem Exact 
Cover [25]. We first briefly review the proposal and, then, we consider the study 
of the properties of the system, in particular the behavior of the entanglement 
entropy for a given bipartition of the ground state. 
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3.1 Adiabatic quantum computation 



The adiabatic model of quantum computation deals with the problem of finding 
the ground state of a given system represented by its Hamiltonian. Many rele- 
vant computational problems (such as 3-SAT) can be mapped to this situation. 
The method is briefly summarized as follows: we start from a time dependent 
Hamiltonian of the form 



H(s(t)) = (1 - s(t))H + s(t)H p , (14) 

where Hq and H p are the initial and problem Hamiltonian respectively, and s(t) 
is a time-dependent function satisfying the boundary conditions s(0) = and 
s(T) = 1 for a given T. The desired solution to a certain problem is codified in 
the ground state of H p . The gap between the ground and the first excited state 
of the instantaneous Hamiltonian at time t will be called g(t). Let us define g m in 
as the global minimum of g(t) for t in the interval [0, T\. If at time T the ground 
state is given by the state \Eq;T), the adiabatic theorem states that if we prepare 
the system in its ground state at t = (which is assumed to be easy to prepare) 
and let it evolve under this Hamiltonian, then 

|(£ ;T|<MT))| 2 >l-6 2 (15) 

provided that 



max I^T 
Urnin 



< e (16) 



where Hi t o is the Hamiltonian matrix element between the ground and first ex- 
cited state, e << 1, and the maximization is taken over the whole time interval 
[0, T]. Because the problem Hamiltonian codifies the solution to the problem in 
its ground state, we get the desired solution with high probability after a time T. 
A closer look to the adiabatic theorem tells us that T dramatically depends on 
the scaling of the inverse of with the size of the system. More concretely, 
if the gap is only polynomially small in the number of qubits (that is to say, it 
scales as 0(l/poly(n)), the computational time is 0(poly(n)), whereas if the gap 
is exponentially small (0(2 - ™)) the algorithm makes use of an exponentially big 
time to reach the solution. 

The explicit functional dependence of the parameter s(t) on time can be very 
diverse. The point of view we adopt in the present paper is such that this time 
dependence is not taken into account, as we study the properties of the system as 
a function of s, which will be understood as the Hamiltonian parameter. We will 
in particular analyze the entanglement properties of the ground state of H(s), as 
adiabatic quantum computation assumes that the quantum state remains always 
close to the instantaneous ground state of the Hamiltonian all along the compu- 
tation. Note that we are dealing with a system which is suitable to undergo a 
quantum phase transition at some critical value of the Hamiltonian parameter, 
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and therefore we expect to achieve the biggest quantum correlations at this point. 
The question is how this big quantum correlations scale with the size of the system 
when dealing with interesting problems. This is the starting point for the next 
two sections. 

3.2 Exact Cover 

The NP-complete problem Exact Cover is a particular case of the 3-SAT problem, 
and is defined as follows: given the ti boolean variables \%i\i=\ 1 ...ni — 

0,1 V i, 

where i is regarded as the bit index, we define a clause of Exact Cover involving 
the three qubits i, j and k (say, clause "C") by the equation Xi + Xj + x k = 1. 
There are only three assignments of the set of variables {xi,Xj,Xk} that satisfy 
this equation, namely, {1,0,0}, {0,1,0} and {0,0,1}. The clause can be more 
specifically expressed in terms of a boolean function in Conjunctive Normal Form 
(CNF) as 

4>c(xi,Xj,x k ) = (xi V xj V x k ) A (-iacj V -iXj V ->x k ) A (pXi V ->Xj V x k ) 

A(->Xi V Xj V -iXfc) A (xi V ->Xj V ->Xk) , (17) 

so (f>c{xi,Xj,Xk) = 1 as long as the clause is properly satisfied. An instance of 
Exact Cover is a collection of clauses which involves different groups of three 
qubits. The problem is to find a string of bits {x\,x% ■ ■ ■ ,x n } which satisfies all 
the clauses. 

This problem can be mapped into finding the ground state of a Hamiltonian 
Hp in the following way: given a clause C define the Hamiltonian associated to 
this clause as 
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where we have defined <r z |0) = |0), cr z \l) = — 11). Note the parallelism between 
equations (|17jl and (|18|) . The quantum states of the computational basis that are 
eigenstates of He with zero eigenvalue (ground states) are the ones that correspond 
to the bit string which satisfies C, whereas the rest of the computational states are 
penalized with an energy equal to one. Now, we construct the problem Hamiltonian 



9 



as the sum of all the Hamiltonians corresponding to all the clauses in our particular 
instance, that is to say, 

H p = H c > ( 19 ) 

C € instance 

so the ground state of this Hamiltonian corresponds to the quantum state whose 
bit string satisfies all the clauses. We have reduced the original problem stated in 
terms of boolean logic to the hard task of finding the ground state of a two and 
three body interactive spin Hamiltonian with local magnetic fields. Observe that 
the couplings depend on the particular instance we are dealing with, and that the 
spin system has not an a priori well defined dimensionality neither a well defined 
lattice topology, in contrast with some usual simple spin models. 

We now define our s-dependent Hamiltonian H(s) as a linear interpolation 
between an initial Hamiltonian Hq and H p : 

H(s) = (1 - s)H + sH p (20) 

where we take the initial Hamiltonian Ho to be basically a magnetic field in the x 
direction, more concretely, 

ffo = £f(l-of), (21) 

i=i 

where d, t is the number of clauses in which qubit i appears, and cr a; |+) = |+), with 
|+) = ^(|0) + |1)), so the ground state of Hq is an equal superposition of all the 
possible computational states. Observe that H(s) is, apart from a constant factor, 
a sum of terms involving local magnetic fields in the x and z direction, together 
with two and three-body interaction coupling terms in the z component. This 
system is suitable to undergo a quantum phase transition (in the limit of infinite 
n) as s is shifted from to 1. The study of this phenomena is the aim of the 
following section. 

3.3 Numerical results up to 20 qubits 

We have randomly generated instances for Exact Cover with only one possible 
satisfying assignment and have constructed the corresponding problem Hamilto- 
nians. Instances are produced by adding clauses at random until there is exactly 
one satisfying assignment, starting over if we end up with no satisfying assign- 
ments. According to [25], these are believed to be the most difficult instances for 
the adiabatic algorithm. Our analysis proceeds as follows: 

Appearance of a quantum phase transition 

We have generated 300 Exact Cover instances (300 random Hamiltonians with 
a non-degenerated ground state) and have calculated the ground state for 10, 
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12 and 14 qubits for different values of the parameter s in steps of 0.01. We 
then consider a particular bipartition of the system into two blocks of n/2 qubits, 
namely, the first n/2 qubits versus the rest, and have calculated the entanglement 
entropy between the two blocks. For each of the randomly generated Hamiltonians 
we observe a peak in the entanglement entropy around a critical value of the 
parameter s c ~ 0.7. We have averaged the obtained curves over the 300 instances 
and have obtained the plot from Fig. El 
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Figure 3: evolution of the entanglement entropy between the two blocks 
of size n/2 when a bipartition of the system is made, on average over 300 
different instances with one satisfying assignment. A peak in the correlations 
appears for s c ~ 0.7 in the three cases. 



The point at which the entropy of entanglement reaches its maximum value is 
identified as the one corresponding to the critical point of a quantum phase tran- 
sition in the system (in the limit of infinite size) . This interpretation is reinforced 
by the observation of the typical energy eigenvalues of the system. For a typical 
instance of 10 qubits we observe that the energy gap between the ground state and 
the first excited state reaches a minimum precisely for a value of the parameter 
s c ~ 0.7 (see Fig. EJ). 

We observe from Fig. El that the peak in the entropy is highly asymmetric 
with respect to the parameter s. A detailed study of the way this peak seems to 
diverge near the critical region seems to indicate that the growth of entanglement 
is slower at the beginning of the evolution and fits remarkably well a curve of 
the type E ~ log | log (s — s c )|, whereas the falling down of the peak is better 
parameterized by a power law E ~ \s — s c \~ a with a ~ 2.3, being a a certain 
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Figure 4: energies of the ground state and first excited state for a typical 
instance with one satisfying assignment of Exact Cover in the case of 10 
qubits (in dimensionless units). The energy gap approaches its minimum at 
s c ~ 0.7. 



critical exponent. These laws governing the critical region fit better and better 
the data as the number of qubits is increased. 

Analysis of different bi-partitions of the system 

Explicit numerical analysis for 10 qubits tells us that all possible bi-partitions 
for each one of the instances produce entropies at the critical point of the same 
order of magnitude -as expected from the non-locality of the interactions-. This 
is represented in Fig. where we plot the minimum and maximum entanglement 
obtained from all the possible partitions of the system for each one of the gener- 
ated instances (points are sorted such that the minimum entropy monotonically 
increases). 

Similar conclusions derive from the data plotted in Fig. H3 where we have 
considered again the same quantities but looking at 64 partitions of the ground 
state for 10 different instances of 16 qubits. According to these results we restrict 
ourselves in what follows to the analysis of a particular bipartition of the system, 
namely the first n/2 qubits versus the rest. 

It is worth emphasizing that the existence of a single partition with exponen- 
tially large entanglement makes the algorithm not amenable to classical simulation. 
The above result is stronger and shows that essentially all partitions are highly 
entangled. The system is definitely hard to simulate by classical means. 
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Figure 5: minimum and maximum entropy over all possible bi-partitions 
of a 10-qubit system for each of the 300 randomly generated instances of 
Exact Cover. Instances are sorted such that the minimum entanglement 
monotonically increases. 
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Figure 6: minimum and maximum entropy over 64 bi-partitions of a 16-qubit 
system for 10 randomly generated instances of Exact Cover. Instances are 
sorted such that the minimum entanglement monotonically increases. 
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Scaling laws for the minimum energy gap and the entanglement en- 
tropy 

To characterize the finite-size behavior of the quantum phase transition, we 
have generated 300 random instances of Exact Cover with only one satisfying 
assignment from 6 to 20 qubits, and studied the maximum Von Neumann entropy 
for a bipartition of the system as well as the minimum gap, both in the worst case 
and in the mean case over all the randomly generated instances. We must point 
out that the scaling laws found in this section are limited to the small systems 
we can handle with in our computers. Increasing the number of qubits may lead 
to corrections in the numerical results, which should be of particular importance 
for a more precise time-complexity analysis of the adiabatic algorithm. Fig. 
represents the behavior of the gap in the worst and mean cases. From Fig. |H]it is 
noticed that the gap seems to obey a scaling law of the style 0(1/ n), being n the 
number of qubits, which would assure a polynomial-time quantum computation. 
This law is in agreement with the results in [25], and are in concordance with 
the idea that the energy gap typically vanishes as the inverse of the volume in 
condensed matter systems (here the volume is the number of qubits). Error bars 
in the two plots give 95 per cent of confidence level in the numerically calculated 
mean. 

We have considered as well the scaling behavior of the entanglement entropy 
for an equally sized bipartition of the system also in the worst and in the mean 
case. The obtained data from our simulations are plotted in Fig. El -where error 
bars give 95 per cent of confidence level in the mean- and seem to be in agreement 
with a strongly linear scaling of entanglement as a function of the size of the num- 
ber of qubits. More concretely, a numerical linear fit for the mean entanglement 
entropy gives us the law E ~ .1 n. Observe that the entropy of entanglement does 
not get saturated in its maximum allowed value (which would be E = n/2 for 
n qubits), so we can say that only a twenty percent of all the possible potential 
available entanglement appears in the quantum algorithm. Linearity in the scaling 
law would imply that this quantum computation by adiabatic evolution, after a 
suitable discretization of the continuous time dependence, could not be classically 
simulated by the protocol of ref. [8]. Given that the scaling of the gap seems to 
indicate that the quantum computation runs in a polynomial time in the size of 
the system, our conclusion is that apparently we are in front of an exponentially 
fast quantum computation that seems extremely difficult (if not impossible) to be 
efficiently simulated by classical means. This could be an inherent quantum me- 
chanical exponential speedup that can be understood in terms of the linear scaling 
of the entropy of entanglement. Note also the parallelism with the behavior of the 
entanglement found in Shor's algorithm in Sec. 2. As a remark, our numerical 
analysis shows that the quantum algorithm is difficult to be simulated classically 
in an efficient way, which does not necessarily imply that the quantum computer 
runs exponentially faster than the classical one, as our time-complexity analysis is 
limited to 20 qubits. 



14 



0.25 



0.1 





I I 


I 1 1 
mean gap ho — i 


_ I 




minimum gap + 


< 

+ 


> 

- 


- 

1 


+ 


+ 

+ 




I I 


I I 


i t : 



6 8 10 12 14 16 18 20 

n 

Figure 7: scaling of the minimum energy gap (in dimensionless units) with 
the size of the system, both in the worst case and in the mean case over all 
the randomly generated instances. Error bars give 95 per cent of confidence 
level for the mean. 
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Figure 8: minimum energy gap (in dimensionless units) versus the inverse 
size of the system, both in the worst case and in the mean case over all the 
randomly generated instances. Error bars give 95 per cent of confidence level 
for the mean. The behavior is apparently linear. 
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Figure 9: scaling of the entanglement entropy for an equally sized bipartition 
of the system, both in the worst case and in the mean case over all the 
randomly generated instances. Error bars give 95 per cent of confidence level 
for the mean. The data are consistent with a linear scaling. 



The linear behavior for the entropy with respect to the size of the system 
could in principle be expected according to the following qualitative reasoning. 
Naively, the entropy was expected to scale as the area of the boundary of the 
splitting, according to some considerations taken from conformal field theory (see 
[13, 14, 19-21]). This area-law is in some sense natural: because the entropy value 
is the same for both density matrices arising from the two subsystems, it can 
only be a function of their shared properties, and these are geometrically encoded 
in the area of the common boundary. For a system of n qubits, this implies a 
scaling law for the entropy like E ~ n ( d ~ 1 ^ d (which reduces to a logarithm for 
d = 1). Our system does not have a well defined dimensionality, but owing to the 
fact that there are many random two and three body interactions, the effective 
(fractal) dimensionality of the system should be very large. Therefore, we expect 
a linear (or almost linear) scaling, which is what we have numerically obtained. 
The data seems to indicate that such an effective dimensionality is around d ~ n, 
thus diverging as n goes to infinity. 

It is possible to compare our apparently linear scaling of the mean entropy 
of entanglement with the known results obtained by averaging this quantity over 
the entire manifold of n-qubit pure states, with respect to the natural Fubini- 
Study measure. According to the results conjectured by Page [26] and later proved 
in [27], the average entropy for an equally-sized bipartition of a random n-qubit 
pure state in the large n limit can be approximated by E ~ (n/2) — 1/(2 In 2) 
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Figure 10: mean entropy of entanglement versus mean size of the energy gap 
(in dimensionless units). Error bars give 95 per cent of confidence level for 
the means. Each point corresponds to a fixed number of qubits. 



(in our notation), therefore displaying as well a linear scaling law (but different 
from ours). In fact, this is an indicator that most of the n-qubit pure states are 
highly entangled, and that adiabatic quantum computation naturally brings the 
system close to these highly entangled regions of the pure state manifold (more 
information about the average entanglement of an n-qubit system can be found 
in [28]). 

The entanglement- gap plane 

The plots in Fig. ^Jand Fig. 1111 show the behavior of the peak in the entan- 
glement versus the gap, both again in the average and the worst case for all the 
generated instances. Clearly, as the gap becomes smaller the production of entan- 
glement in the algorithm increases. A compression of the energy levels correlates 
with high quantum correlations in the system. 

Convergence of the critical points 

The critical point s c seems to be bounded by the values of s associated to the 
minimum gap and to the maximum entropy. Actually, the critical point corre- 
sponding to the minimum size of the energy gap is systematically slightly bigger 
than the critical point corresponding to the peak in the entropy. By increasing 
the size of the system these two points converge towards the same value, which 
would correspond to the true critical point of a system of infinite size. This effect 
is neatly observed in Fig. which displays the values of s associated to the mean 
critical points both for the gap and for the entropy as a function of n. 
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ergy gap (in dimensionless units). Each point corresponds to a fixed number 
of qubits. 
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Figure 12: mean critical point for the energy gap and for the entropy. Error 
bars give 95 per cent of confidence level for the means. Note that they tend 
to approach as the size of the system is increased. 
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Universality 

All the above results suggest that the system comes close to a quantum phase 
transition. The characterization we have presented based on the study of averages 
over instances reconstructs its universal behavior. Results do not depend on par- 
ticular microscopic details of the Hamiltonian, such as the interactions shared by 
the spins or the strength of local magnetic fields. Any adiabatic algorithm solving 
a fc-sat problem and built in the same way we have done for Exact Cover should 
display on average exactly the same properties we have found regardless of the 
value of k, which follows from universality (the case k = 2, though not being NP- 
complete, should display also this property as its hamiltonian would consist as well 
of local interactions in a big-dimensional lattice; k = 1 is a particular case, as its 
hamiltonian is non- interacting) . Linear scaling of entanglement should therefore 
be a universal law for these kind of quantum algorithms. The specific coefficients 
of the scaling law for the entropy should be a function only of the connectivity of 
the system, that is on the type of clauses defining the instances. 

We have explicitly checked this assertion by numerical simulations for clauses 
of Exact Cover but involving 4 qubits (xi + x,j +x^ + xi = 1), which is a particular 
case of 4-sat. In Fig. El we plot the behavior of the entropy of entanglement for 
a 10-qubit system for these type of clauses and compare it to the same quantity 
calculated previously for the clauses involving 3 qubits (the usual Exact Cover 
Hamiltonian). We observe again the appearance of a peak in the entropy, which 
means that the system is evolving close to a quantum phase transition. 



CO 




Figure 13: entanglement as a function of the Hamiltonian parameter for 
clauses of Exact Cover involving 3 {k — 3) and 4 (k = 4) qubits, for a 
10-qubit system, averaged over all the randomly generated instances. 
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confidence level for the mean. The behavior seems to be linear. 
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Figures ITU and iTSl respectively show the scaling of the energy gap in the mean 
and worst case and the scaling of the peak in the entropy in the mean and worst 
case as well, up to 16 qubits. Error bars give again 95 per cent of confidence level 
for the means. The behavior is similar to the one already found for the instances 
of Exact Cover involving 3 qubits (figures |H1 and , which supports the idea of 
the universality of the results. The minimum energy gap seems to scale in this 
case as ~ (n being the number of qubits), which would guarantee again a 
polynomial-time quantum adiabatic evolution. 



4 Scaling of entanglement in adiabatic Grover's 
algorithm 



Let us now consider the adiabatic implementation of Grover's quantum searching 
algorithm in terms of a Hamiltonian evolution [29-31] and study its properties as 
a function of the number of qubits and the parameter s. For this problem, it is 
possible to compute all the results analytically, so we shall get a closed expression 
for the scaling of entanglement. As a side remark, it is worth noting that the 
treatment made in [8] is not valid for oracular problems as it is assumed that all 
quantum gates are known in advanced. Independently of this issue, we shall see 
that the system remains little entangled between calls to the oracle. 

4.1 Implementation of Grover's searching algorithm 
with adiabatic quantum computation 

Grover's searching algorithm [29] can be implemented in adiabatic quantum com- 
putation by means of the s-dependent Hamiltonian 



state. The computation takes the quantum state from an equal superposition of 
all computational states directly to the state \xo), as long as the evolution remains 
adiabatic. The time the algorithm takes to succeed depends on how we choose 
the parameterization of s in terms of time. Our aim is to compute the amount of 
entanglement present in the register and need not deal with the explicit dependence 
of the parameter s on time and its consequences (see [30,31] for further information 
about this topic). 

It is straightforward to check that the Hamiltonian Q22JI has its minimum gap 
between the ground and first excited states at s = 0.5, which goes to zero expo- 
nentially fast as the number of qubits in the system is increased. Therefore, this 
Hamiltonian apparently seems to undergo a quantum phase transition in the limit 



where 
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of infinite size at s = 0.5. Quantum correlations approach their maximum for this 
value of s (for more on Grover's problem as a quantum phase transition, see [37]). 

4.2 Analytical results 

It can be seen (see for example [36]) that the ground state energy of the Hamilto- 
nian given in equation (|22|) corresponds to the expression 

E- (s) = \U- ] J(l-2sr + ^s(l-s) ) j , (23) 

being s is the Hamiltonian parameter. The corresponding normalized ground state 
eigenvector is given by 

\E_(s))=a\x ) + bJ2 \x) , (24) 

X^X 

where we have defined the quantities 



a = a b 



* s — ' 

2 n - 1 + a 2 

2 n - 1 

a = , . (25) 

In all the forthcoming analysis we will assume that the marked state corre- 
sponds to \xq) = |0), which will not alter our results. The corresponding density 
matrix for the ground state of the whole system of n qubits is then given by 



p n = b 2 (a 2 -2a + 1)|0)<0| + + b\a - 1)(|0)<O| + |0>(^|) , (26) 

where we have defined \4>) as the the unnormalized sum of all the computational 
quantum states (including the marked one), \<p) = Yl x =^ \ x )- Taking the partial 
trace over half of the qubits, regardless of what n/2 qubits we choose, we find the 
reduced density matrix 



/3n/2 = 6 2 (a 2 -2a + l)|O / )(O / | + 2 n / 2 6 2 [0 / )^ , |+& 2 (a-l)(l0 , }(O , | + |O / )(0 / |) , (27) 

where we understand that |0') is the remaining marked state for the subsystem of 

n/2 qubits and \<p') = ^x=o _1 \ x ) * s * ne remaining unnormalized equally super- 
position of all the possible computational states for the subsystem. Defining the 
quantities 
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A 



B 



C 



a' 



+ 2 n / 2 - 1 



a 2 + 2 n 


- 1 


a + 2 n / 2 


- 1 


a 2 + 2 n 


- 1 


2n/2 




a 2 + 2 n - 


- 1 



(28) 



(note that A + (2 n l 2 — 1)C = 1), the density operator for the reduced system of 
n/2 qubits can be expressed in matrix notation as 



(A 
B 



Pn/2 



B 

C 

c 



C 



(29) 



\B C ••• Cj 

where its dimensions are 2 n / 2 x 2 n / 2 . We clearly see that the density matrix 
has rank equal to 2. Therefore, because rank(p) > 2 E ^ Vp (where E(p) is the 
Von Neumann entropy of the density matrix p) we conclude that E(p n /2), which 
corresponds to our entanglement measure between the two blocks of qubits, is 
always < 1 . This holds true even for non symmetric bi-partitions of the complete 
system. Regardless of the number of qubits, entanglement in Grover's adiabatic 
algorithm is always a bounded quantity for any s, in contrast with the results 
obtained in the previous sections for Shor's factoring algorithm and for the Exact 
Cover problem. Grover's adiabatic quantum algorithm essentially makes use of 
very little entanglement, but even this bounded quantity of quantum correlations 
is enough to give a square root speedup. 

We have explicitly calculated the Von Neumann entropy for p n / 2 - Because 
the rank of the reduced density matrix is two, there are only two non-vanishing 
eigenvalues that contribute in the calculation which are 



(30) 



A± = - (1 ± y/1 - 4(2«/ 2 - 1)(AC - B 2 ) 
We analyze the limit n — > oo for s ^ 0.5 and s = 0.5 separately: 
(i) s / 0.5 



In the limit of very high n we can approximate the ground state energy given 
in equation (|23|) by 



1 



(31) 
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Therefore, the quantity 



a 7 ttv (32) 



1 



diverges at s = 0.5, which implies that this limit can not be correct for that value 
of the parameter. The closer we are to s = 0.5, the bigger is a. In this limit we 
find that 



A 



B 



a 2 + 2 n ' 2 
a 2 + 2 n 

a + 2 n ' 2 
a 2 + 2™ 



(33) 



(34) 

C 2T^. ( 35 ) 

where all these quantities tend to zero as n — > oo. It is important to note that the 
convergence of the limit depends on the value of a or, in other words, how close 
to s = 0.5 we are. The closer we are to s = 0.5, the slower is the convergence, 
and therefore any quantity depending on these parameters (such as the entropy) 
will converge slower to its assimptotical value. For the eigenvalues of the reduced 
density matrix we then find that when n — > oo 

A±->i(l±l), (36) 
so A + ~ 1 and A_ ~ 0, and therefore the assimptotical entropy is 

E(s / 0.5, n -» oo) = -A+ log 2 A+ - A_ log 2 A_ = . (37) 
The convergence of this quantity is slower as we move towards s = 0.5. 

(ii)s = 0.5 

We begin our analysis by evaluating the quantities at s = 0.5 and then taking 
the limit of big size of the system. We have that a(s = 0.5) = ^n-i ~ 2 n / 2 . 
From here it is easy to get the approximations 
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Figure 16: Von Neumann entropy for the reduced system as a function of 
s for 10, 12 and 14 qubits. As the size of the system increases the entropy 
tends to zero at all points, except at s — 0.5 in which tends to 1. 



and therefore 

A ± ~ I (l±Jl -4 jWI 1 ±V\ = I ± * , (39) 
2 I Y V 4 2 n / 2 2 n J J 2 2"/4 ' v ; 

so A± -» | and £(s = 0.5, n — > oo) = 1. According with (|39|) we can evaluate the 
finite size corrections to this behavior and find the scaling of the entropy with the 
size of the system for very large n. The final result for the entropy at the critical 
point reads 

E(s = 0.5, n ») ~ 1 - -^-2~ n/2 . (40) 

In 2 

Note that the entropy remains bounded and tends to 1 for s = 0.5 as an square 
root in the exponential of the size of the system, which is the typical factor in 
Grover's quantum algorithm. 

We have represented the evolution of the entanglement entropy as a function 
of s for different sizes of the system in Fig. ^] and have plotted in Fig. El the 
maximum value of the entropy along the computation as a function of the size 
of the system according to the expression given in equation (|40|1. We can now 
compare the two plots with Fig. |21 and Fig. El in the previous section. The 
behavior for the entropy in Grover's adiabatic algorithm is dramatically different 
to the one observed in the NP-complete problem. Entanglement gets saturated 
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Figure 17: Von Neumann entropy for the reduced system at s = 0.5 as a 
function of n. For infinite size of the system there is a saturation at 1. 



in Grover's adiabatic algorithm even at the critical point, which is reminiscent of 
short ranged quantum correlations in quantum spin chains 1 . 

Let us note that, in the limit of infinite size, the quantum state in Grover's 
algorithm is separable with respect to any bipartition of the system (and therefore 
not entangled, as it is a pure state) for any s except for s = 0.5. All the entangle- 
ment along the algorithm is concentrated at this point, but this entanglement is 
still a bounded quantity and actually equal to 1. Consequently, a small amount of 
entanglement appears essentially only at one point when the size of the system is 
big, whereas the rest of the algorithm needs to handle just separable states. We 
point out that these results apply as well to the traditional discrete-time imple- 
mentation of Grover's searching algorithm, as the states between iterations are the 
same as in the adiabatic version for discrete s values. 



5 Conclusions 

In this paper we have studied the scaling of the entanglement entropy in sev- 
eral quantum algorithms. In particular, we have analytically proven that Shor's 
factoring algorithm makes use of an exponentially large amount of entanglement 

1 A somehow similar situation is present in one-dimensional quantum spin chains outside 
of the critical region, where the entanglement entropy also reaches a saturation when 
increasing the size of the system [14]. Saturation does not appear in higher dimensional 
systems. 
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between the target register and the source register after the modular exponen- 
tiation operation, which in turn implies the impossibility of an efficient classical 
simulation by means of the protocol of ref. [8]. Furthermore, we have provided 
numerical evidence for a universal linear scaling of the entropy with the size of the 
system together with a polynomially small gap in a quantum algorithm by adia- 
batic evolution devised to solve the NP-complete problem Exact Cover, therefore 
obtaining a polynomial-time quantum algorithm which would involve exponential 
resources if simulated classically, in analogy to Shor's algorithm. Universality of 
this result follows from the fact that the quantum adiabatic algorithm evolves 
close to a quantum phase transition and the properties at the critical region do 
not depend on particular details of the microscopic Hamiltonian (instance) such 
as interactions among the spins or local magnetic fields. We have also proven 
that the Von Neumann entropy remains a bounded quantity in Grover's adiabatic 
algorithm regardless of the size of the system even at the critical point. More 
concretely, the maximum entropy approaches to one as an square root in the size 
of the system, which is the typical Grover's scaling factor. 

Our results show that studying the scaling of the entropy is a useful way of 
analyzing entanglement production in quantum computers. Results from other 
fields of physics [19-21] can be directly applied to bring further insight into the 
analysis of quantum correlations. Different entanglement scaling laws follow from 
different situations according to the amount of correlations involved, as can be 
seen in Table ^ A quantum algorithm can be understood as the simulation of a 
system evolving close to a quantum phase transition. The amount of entanglement 
involved depends on the effective dimensionality of the system, which in turn 
governs the possibilities of certain efficient classical simulation protocols. 

These scaling laws provide a new way of understanding some aspects from 
one-way quantum computation. It is known that the so-called cluster state of the 
one-way quantum computer can be generated by using Ising-like interactions on a 
planar two-dimensional lattice [38-40]. This fact can be related to the linear (in 
the size of a box) behavior of entropy for spin systems in two dimensions. One- 
dimensional models seem not to be able to efficiently create the highly-entangled 
cluster state [41]. Again, this fact can be traced to the logarithmic scaling law 
of the entropy in spin chains which is insufficient to handle the large amount of 
entanglement to carry out e.g. Shor's algorithm. Note also that d > 3 dimensional 
systems bring unnecessarily large entanglement. 

Quantum phase transitions stand as the more demanding systems in terms of 
entanglement. They are very hard to simulate classically. It is then reasonable to 
try to bring NP-complete problems to a quantum phase transition setup, which 
quantum mechanics handles naturally. 
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Problem 


Entanglement scaling 


Adiabatic Exact Cover's quantum algorithm 


E = 0{n) 


Shor's quantum factoring algorithm 


E = 0(\og 2 r) ~ 0(n) 


Critical <i-dimensional spin networks 


E = 0{n^r) 


Critical one-dimensional spin chains 


E = 0(\ozo n) 


Non-critical one-dimensional spin chains 


E = 0{1) 


Adiabatic Grover's quantum algorithm 


E = 0(1) 



Table 1: entanglement scaling laws in different problems, in decreasing com- 
plexity order. 
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